Last updated: 25/8/2025
This privacy policy (“Privacy Notice”) describes how Trip.com will collect, use and/or disclose your personal data when you interact with us and any Trip.com websites (including any affiliated sites), mobile apps, and other services operated by us (hereafter collectively referred to as the “Services”) and when you purchase services from us.
It also describes your data protection rights, including the right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in section 5 below.
Trip.com collects, uses and/or discloses the information you provide to us directly to provide you with the services you request. For example, you may provide us your mobile number, email, or other information when you register a Trip.com account. When booking flight or train tickets, or using our car rental service, you may provide passenger names, ID document numbers and the contact person’s name, mobile number, email and other information. When booking hotels and tickets for tourist attractions, you may provide the travellers' names, contact person’s name, mobile number, and email, etc. When paying for travel products, you may provide your bank card number, the mobile number previously provided to the bank, or your credit card details.
To enhance payment convenience, if your device supports biometric authentication (e.g., fingerprint or Face ID), you may choose to enable this feature for transactions. This verification is processed entirely on your device, and Trip.com does not collect, process, or store your biometric data. We only receive confirmation of successful authentication to authorize transactions. You can disable biometric authentication at any time through your account settings. The processing of biometric verification results is based on user consent.
To customize the services we provide you, we may also collect, use and/or disclose information about your travel plans and preferences which includes your meal requirements, departure date, check-in and check-out times, seat choice, ticket choice, insurance choice, and your selection of other services (such as car rental, attraction tickets, and travel guides, etc.) provided by Trip.com.
If you need to get in touch with our customer support team or reach out to us through other means (such as through social media) we will collect, use and/or disclose information from you there too, such as your name and contact information. For quality, training and dispute resolution purposes, we may record phone conversations when you call us, when you answer our calls or when you have a conversation with our partner providers via our platform.
You may also participate in referral programs or prize promotions, the details of which may be found on the event page. Doing so will also mean providing us with your name and contact information. In addition to this, you can provide us with feedback or ask for help with using Trip.com travel services.
You may be traveling with other guests or making a booking on someone else’s behalf, in which case you will provide the relevant personal data to Trip.com. However, we would like to remind you that it is your responsibility to ensure that the person or people whose personal data you have provided are aware that you’ve done so, and have agreed to your sharing of their personal data with Trip.com for the purposes set out in this Privacy Notice.
AI systems are implemented to assist certain data processing activities as describe in the table below. Please note that your personal data will not be used for AI training, or transferred to any third parties for providing AI service.
The table below describes the personal data we collect, use and/or disclose, the purposes for which we collect, use and/or disclose the personal data, and the legal bases we rely on to process the personal data.
No | Purpose | Detailed purpose and scenario description | Categories of Personal Data | Legal Basis |
1. | Account registration | We will collect, use and/or disclose the personal data you provide to manage your Trip.com account and provide you with practical features. You can use your account for various operations, such as managing bookings, adjusting personal settings, checking past bookings, evaluating orders, and managing payments, etc. | When creating an account via email: email and password. When creating an account via phone number: phone number and password. (altogether “Account Registration Information”) | It is necessary for us to process your personal data to perform our contract with you, or to take steps at your request prior to entering into a contract with you. |
2. | Account management | You can maintain and update your personal data in your profile, which are optional, and you may delete them anytime you want. You may also add frequently used passenger information in your account. | Your details (optional): name, display name, gender, date of birth, country or region, city of residence, frequently visited cities. Frequently used passenger information (optional): name, country or region, date of birth, gender, ID Card number and expiry date Card information (optional): credit/debit card number, cardholder name, expiry date. (altogether “Account Information”) | We have a legitimate interest in managing our business and providing you with our Services. |
3. | Reservation management | We will collect, use and/or disclose your personal data to complete and manage your online booking. In addition, we may provide you with the relevant products and services through affiliates and related corporations, business partners, and third parties. If you provide personal data of minors under 18 when booking flight tickets, train tickets, applying for minor’s SOS services, or reserving family rooms, please ensure that you have obtained the consent of the minor's guardian in accordance with applicable laws. Please note that train/flight tickets for minors can only be booked together with tickets for adults. You can choose to save your payment details to make future reservations and payments more convenient, and you can modify, delete, or add card information anytime through your account settings. To enable more convenient payment, if your device supports fingerprint or Face ID features, you may choose to use fingerprint or Face ID payment services on Trip.com. The biometric verification is processed on your device. We only receive the verification results and do not collect, process or store your fingerprint or Face ID information. We make no representation or warranty as to the security of this function of any permitted device or whether it works in the way that the manufacturer of the device represents. Fingerprint or Face ID will be the default payment method. You can change this at any time by selecting an alternative method, such as password. You may also disable this function anytime in “settings-my account-payment settings”, and then a password will be required for future payments. Please avoid leaving biometric information of others on your device to prevent payments via biometric verification by others, and you will be responsible for any risks associated with this. | For reservations with payment conducted via Trip.com: payment details (including credit/debit card number, cardholder name, expiry date, CVV2). For flight tickets: date of birth, nationality, gender; passport number (if applicable), expiration date (if applicable), mileage membership number (optional), passport photo (if applicable), KTN number. For train tickets in Korea: date of birth, nationality; For train tickets in Mainland China: ID type, ID number, expiration date, date of birth. For flight and hotel reservations: date of birth, nationality, gender, passport number (if applicable), expiration date (if applicable), mileage membership number (optional), passport photo (if applicable), KTN number. For car rentals: driver’s name, age range, mobile phone number, email, driver’s license issuing country/region, flight number. For bus/cruise reservations (if applicable): passport number, expiration date, country, gender, date of birth. For e-visa reservations: passport number, expiration date, country, gender. For SIM card purchase: delivery address. For hotel reservations (if applicable): passport number, date of birth, gender, as required by the hotel. For tour reservations: departure point, number of people, departure time. For pick-up / drop-off service: pick-up point, destination, social media account (e.g. WhatsApp, Skype, Line, WeChat) (optional). For insurance products: personal data you provide when you purchase certain insurance products alone or with other travel products, as specified in the respective product pages. For Travel Buddy: itinerary information, profile photo, age, gender, email address, phone number (optional), social media account (optional) and preferences for travel buddies (language and gender). For gift card: recipient name, recipient email address, sender name, message, contact name, contact email address, contact phone number (optional). (altogether “Reservation Information”). | It is necessary for us to process your personal data in order to perform our contract with you, or to take steps at your request prior to entering into a contract with you. Your consent where required by law. |
4. | Fraud detection and prevention, payment verification, improving service security and reliability | We may collect, use and/or disclose your personal data to detect and prevent fraud, illegal activities and potential transaction risks, as well as for other risk assessment and security purposes. AI systems are implemented to assist human review of fraud risks. If you are using our apps, they will send us error-reporting information when they crash or hang. This enables us to investigate the error and to improve the stability of our apps for future releases. We monitor customer accounts to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law. If you use a credit or debit card as payment, we also use third parties to check the validity of the sort code, account number, and card number you submit in order to prevent fraud. | All personal data collected provided it is necessary. | We have a legitimate interest in ensuring the security of our operations, assets, and individuals interacting with our Services. |
5. | Customer service | We provide customer support via email, phone call and chat in multiple languages to offer help when you need it. We may use AI chatbot to answer your questions and interact with you when you call us or chat with us on Trip.com. Your personal data may be used for receiving, responding to and/or dealing with your questions or requests (whether for information or otherwise) and/or sending booking-related messages (such as messages telling you of a successfully submitted booking, messages reminding you to complete unfinished bookings, etc.) to you via email, platform notice and/or push. You may consent to such communications via third-party channels separately. Your phone conversations with our customer support staff, both answering our calls and calling us, as well as your calls (via VOIP or other virtual numbers) with our partner providers via our platform (including hotels, ticket and tour service providers), may be recorded. We may rely on these recordings to monitor the quality of our customer support, check the accuracy of the information you provide for fraud prevention and transaction security, for dispute resolution, or for internal staff training. Additionally, due to factors such as network conditions, call environment, and regulatory policies, there may be instances of recording/storage failure. We also collect, use and/or disclose other forms of communications with us, including your emails with our partner providers via our DID email function and chat via our platform for the above purposes. | Account Registration Information. Account Information. Reservation Information. Third-party account information (e.g. WhatsApp, LINE, Kakao) as you consent to separately. Call recording of your conversations with our customer support staff and/or our partner providers via our platform (you have the right to refuse such call recording in accordance with applicable law) (“Call Recordings”). Other forms of communications with us, including your emails with our partner providers via our DID email function and chat via our platform. Automatically Collected Information as specified in this Privacy Notice. Other personal data you provide to our customer service staff to facilitate your request. | It is necessary for us to process your personal data in order to perform our contract with you, or to take steps at your request prior to entering into a contract with you. We also have a legitimate interest in managing our business and providing you customer service. |
6. | Service improvement, customized service provision | We may collect, use and/or disclose your personal data for analysis so that we can know the city you are in, your preferences, and demographic information, or match it with the personal data obtained from other sources (including third parties), to display customized contents, offer travel recommendations that we think may interest you, suggest questions you may ask, develop our products and services or marketing plans, and improve our services. We use AI to offer customized answers and other features when you use TripGenie. Based on the personal data we collect during your visit on Trip.com and your interaction with TripGenie, we display suggested questions for your reference and provide you with tailored answers and recommendations generated by AI when you seek tour advice. We monitor your use of our websites or apps, to help us refine and improve the way our websites or apps work technically. We may also send you questionnaires or invite you to provide feedback on our services. | Account Registration Information. Account Information. Reservation Information. Your communication with us. Your preferences which include your meal requirements, departure date, check-in and check-out times, seat choice, ticket choice, insurance choice, and your selection of other services (such as car rental, attraction tickets, and travel guides, etc.) provided by Trip.com. Automatically Collected Information. Geographic information (optional). | Your consent where cookies are used or when we ask for your geographic information. Otherwise, we have a legitimate interest in managing and improving our services. |
7. | Displaying reviews, posting community information | We display guest reviews on the relevant travel product/service pages (e.g., accommodation, restaurant, etc.) on our websites, on our mobile apps, on our social media accounts and social media apps, or on the website of the relevant accommodation or business partner’s website. This is to inform other travellers about the quality of the travel product you used, the destination you chose, or the other services you have used. We will also aggregate your guest review data with feedback from other customers in order to sort and prioritize guest reviews. We may use and/or disclose the information in your reviews or in other destination-related information you share with us in an anonymous form, unless you have included this information in your public profile. This is to help travellers like you find the right destination and the best accommodation to suit them. Where you choose to post a public review, we may share information with the relevant Travel Service Providers to understand your experience. If you do not want your review shared, you can post the review anonymously. | Information uploaded when you evaluate products/services or post other content (such as evaluations, photos, videos, dates, places, or geographical location information). | We have a legitimate interest in displaying reviews and community information to help travellers make informed decisions. The Travel Service Providers have a legitimate interest in understanding user experiences to improve their services. |
8. | Participation in platform activities | We collect, use and/or disclose your personal data when you participate in activities on Trip.com for better experience, more benefits or rewards (e.g. My Trip, itinerary, member activities, Trip Moments awards, referral programs and prize promotions, etc.) | Personal data you provide when you participate in such activities, including but not limited to Account Registration Information and Reservation Information. | It is necessary for us to process your personal data to perform our contract with you, or to take steps at your request prior to entering into a contract with you. Your consent where required by law. |
9. | Fulfilling legal obligations; purposes required by law | Complying with applicable laws, regulations, regulatory policies, codes of practice, guidelines, rules, judgments, orders, directions or requests issued by any court or legal or regulatory bodies, and the carrying out of internal and external audits, or otherwise meeting the requirements of relevant regulators and accrediting bodies, in order to protect our and your rights and interests, and/or defend ourselves. Complying with applicable security and anti-terrorism, anti-bribery, customs and immigration, and other due diligence laws, rules, regulations and requirements. Dealing with insurance claims and payments that occur under relevant policies, processing commissions paid to partners, performing our obligations or exercising our rights as set out in binding contractual terms, claiming for loss caused by service partners, recovering payments made, managing your relationship with us, etc. | All personal data collected provided it is necessary. | When we have a legal obligation under applicable laws, we process the personal data in order to comply with applicable law and regulations. We have a legitimate interest in protecting our business interests and legal rights, and your interests and legal rights. |
10. | Investigations, complaints management, and dispute resolution | We may collect, use and/or disclose information you provide to receive, respond to, investigate and/or manage any complaints received from you or from others about our websites, or our products and services. We may collect, use and/or disclose personal data in connection with legal claims, compliance, crimes, regulatory purposes and investigative purposes as necessary (including the disclosure of such personal data in connection with legal authority investigation, assisting in law enforcement, legal process or litigation). If a dispute arises, including your dispute with the service providers, relevant Call Recordings may be collected, used and/or disclosed for dispute resolution. | Account Registration Information. Account Information. Reservation Information. Call Recordings. Automatically Collected Information as specified in this Privacy Notice. Other personal data required under applicable law or by appropriate authorities. | When we have a legal obligation under applicable laws, we process the personal data in order to comply with applicable law and regulations. We have a legitimate interest in protecting our business interests and legal rights, and your interests and legal rights. |
11. | User experience survey and market research | We will sometimes invite you to participate, via emails or calls, in user experience surveys (including about your experience on previous trips ordered through us) or market research to better understand your interest, comments and expectations in our Services. We may also contact you for follow-up queries on your responses for such analysis. | Phone number, email address, social media account you provide separately. | Your consent where required by law. We also have a legitimate interest in understanding and improving our services based on your feedback. |
12. | Marketing activities | We may ask for your consent to send you certain electronic direct marketing content in relation to our Services, or other products and services provided by our affiliates and related corporations and partners. Our marketing activities also involve cross-device tracking, where third parties collect information on your online activities via cookies across multiple linked devices and combine this information to tailor the advertisement that you see across the Internet to your interests (commonly known as Internet based advertising). See our Cookie Statement for more details. | Phone number, email address, social media account you provide separately. Automatically Collected Information. | Your consent. |
13. | Insurance claims, refund or reservation modification claims due to medical issues, SOS service, and provision of other medical-related services | When you need to file an insurance claim, request a refund or change due to a medical issue, require emergency SOS service on Trip.com, or need to access other medical-related services, we may collect, use and/or disclose health information to confirm and proceed with your request. | Account Registration Information. Account Information. Health information as required (e.g., health status, hospital diagnosis, illness). For SOS service: Health information, location, contact information, and other personal data necessary to provide emergency assistance. | It is necessary for us to process your personal data in order to perform our contract with you, or to take steps at your request prior to entering into a contract with you. It is necessary for us to process your personal data to protect your vital interests or those of another natural person where you are physically or legally incapable of giving consent. In all other cases: your consent. |
14. | Student verification and benefit provision | If you wish to verify your student status and enjoy related discounts, we will process relevant personal data, and some of such data is required by the suppliers/providers of the discounts. The ISIC International Student ID or similar certificate will be used solely to verify your student status. | Nationality, estimated graduation time, school full name. Student email address and email verification code, or alternatively, photo of your ISIC International Student Card. | We have a legitimate interest in managing our business and providing you with our Services. |
To use our Services and/or enter into a contract with us, the collection, use and/or disclosure of certain relevant personal data is mandatory. If you withdraw your consent for the collection, use and/or disclosure of such relevant personal data, we will not be able to provide some or all of our Services and/or enter into a contract with you, and we may need to terminate the existing relationship and/or contract you have with us. We have highlighted above the personal data for which the collection, use and/or disclosure is optional.
Sometimes, we receive information about you from third parties. In particular, we may also obtain your information from affiliates and related corporations and business partners.
For example, when you make a booking or reservation through the website or mobile app of one of our affiliates and related corporations or business partners, your booking or reservation information with them might be forwarded to us so that we can process your booking and ensure its success. Also, we allow you to log into Trip.com with your social media account or Apple ID, and with your consent (where you grant authorization to such third party), your personal data (e.g., openid, name, nickname, email address, profile photo, where applicable) will be shared with us through that third party.
Trip.com automatically collects user-related information during service use for security, service provision, claim response, dispute resolution, and restriction of legal and terms violations. The specific details are as follows.
For more details on how we use cookies, please refer to our Cookie Statement.
We may share your personal data with the following categories of recipients:
Personal Data Category | Category of Recipient | Why? |
Account Registration Information; Account Information; Reservation Information. | Travel Service Providers | This includes, but is not limited to, hotels, airlines, cruise lines, railways, buses, car rental/pickup providers, travel agencies, tourist attractions, event organizers, insurance companies, and agents required for booking with these parties (collectively “Travel Service Providers”). These providers may contact you as necessary to provide travel products and services. These providers are not managed by Trip.com, and the personal data disclosed to them is subject to their privacy policies and security regulations. Therefore, we recommend that you carefully review the privacy policies of the Travel Service Providers providing the products and services purchased through Trip.com. |
Account Registration Information; Account Information; Reservation Information; Automatically Collected Information; Health information, location, contact information, and other personal data necessary to provide emergency assistance. | Third-party vendors | We collaborate with third-party vendors who may provide services or functions to us or on our behalf, such as message delivery, insurance enrolment, business analysis, customer service, marketing, surveys or prize promotions, fraud prevention, technical support, etc. Additionally, we allow third-party vendors to collect information necessary to operate relevant features of our Services or deliver online advertisements tailored to your interests. Third-party vendors can only access and collect information necessary for these functions and cannot collect, use and/or disclose such personal data for other purposes. |
Account Registration Information; Account Information; Reservation Information; Automatically Collected Information. | Financial institutions and third-party payment processors | We share relevant information with financial institutions or third-party payment processors for reservations and refund requests. If deemed necessary for fraud detection and prevention, we may share additional necessary information (e.g., email address, phone number, IP address) with relevant financial institutions. |
Account Registration Information; Account Information; Reservation Information; Automatically Collected Information. | Business partners | These are partners who can jointly provide products or services or offer products or services on our platforms. You can identify third-party involvement by the appearance of the third party’s name alone or with our name. We may share relevant information, including personal data, with such partners when you request specific products or services. You may also be directed to such partners’ pages for provision of the relevant products or services. The information disclosed to them is subject to their privacy policies and security regulations, so we recommend you carefully review their privacy policies. |
Automatically Collected Information; Hashed phone numbers and email addresses, openid; Account Registration Information as you consent separately for certain advertising partners. | Advertising partners | We may disclose your personal data to third-party marketing partners to provide customized advertising. This allows us to tailor your experience with content that may be of interest and offer better travel experiences. We may also disclose hashed phone numbers and email addresses as well as openid of our registered users and users with orders to advertising partners, including Google, Facebook, TikTok and Bing to ensure that relevant advertisements are shown to the right audience. For more details, please refer to our Cookie Statement. |
Account Registration Information; Account Information; Reservation Information; Automatically Collected Information. | Affiliates and related corporations within our group | We may share personal data with our affiliates and related corporations as well as information about travel-related products and services to ensure the smooth provision of requested services, including but not limited to the purposes of customer service, payment, internal management of customer data, etc., to the extent necessary. All business divisions of our group offer similar protection measures for personal data, strictly adhering to the same standards as this Privacy Notice. |
All personal data collected provided it is necessary. | Government authorities, law enforcement, regulators and fraud prevention agencies | To prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law; and to assist competent authorities in investigation, legal process or litigation, or other regulatory and investigative purposes as necessary. |
All personal data collected provided it is necessary. | Prospective buyers and their advisers; Trip.com’s advisers | In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s advisers and will be passed to the new owners of the business. |
Personal data that we collect from you may be transferred to and stored at a destination outside your country. Due to the global nature of our business, your personal data may be disclosed to our Travel Service Providers, third-party vendors, financial institutions and third-party payment processors, business partners, advertising partners, affiliates and related corporations within our group, government authorities, law enforcement, regulators and fraud prevention agencies, prospective buyers and their advisers, and Trip.com’s advisers outside of your country, in connection with the purposes described above. Where these locations do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect your personal data in these countries.
Depending on your location, you have certain data protection rights in accordance with applicable data laws.
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you wish to exercise any of these rights, please contact us at the contact details set out below.
Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Please also note that we will not be able to provide some or all of our Services and/or enter into a contract with you in case you withdraw your consent.
You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message (e.g. clicking the unsubscribe link contained at the bottom of marketing emails), by adjusting the notification settings in your account profile on Trip.com websites or apps, or by contacting us using the details set out below.
We are committed to investigating and resolving complaints about our collection, use and/or disclosure of your personal data. To make a complaint, please clearly provide the following information to help us address the issue effectively:
If you are not satisfied with our resolution of your complaint, you have the right to complain to the relevant data protection authority.
We aim to resolve all issues in a timely manner, or as mandated by applicable law, but if this is not possible because a more detailed investigation is required, we will keep in regular contact with you to ensure that you are kept informed of the resolution of your matter.
Where Trip.com processes your personal data as allowed by law or with your consent, Trip.com will store your personal data i) only for as long as is required to fulfil the purposes mentioned previously or other business or legal purposes, ii) until you object to our use of your personal data (where Trip.com has a legitimate interest in using your personal data), or iii) until you withdraw your consent, whichever is applicable. However, if Trip.com is required to retain your personal data for business or legal purposes or to address legal claims, Trip.com will retain your personal data until there is no longer any business or legal purpose to do so or until the claims in question have been settled. In particular:
Where we process your personal data in relation to your account, we do this for as long as you are a user of Trip.com and as allowed by applicable laws after this. If you request data deletion when deleting your account, we will respond to your request in accordance with applicable laws.
Where we process personal data for marketing purposes or with your consent, we process the personal data until you ask us to stop and for a short period after this to allow us to implement your requests. We also keep a record of the fact that you have asked us not to send you direct marketing or not to process your personal data indefinitely so that we can respect your request in future.
Where we process your personal data for student verification or your health information for refund or change of reservation, we will automatically delete them on a rolling basis after the necessary period for the purposes above.
Trip.com attaches great importance to information security and has set up a dedicated team for this. We strive to protect your personal data and have taken appropriate managerial, technological, and physical security measures.
In terms of the data life cycle, we have established security measures for all stages including data collection, storage, display, processing, use, and destruction. We take different control measures according to the level of information sensitivity, including but not limited to access control, SSL encryption transmission, and high-level encryption algorithms for encrypted storage, in order to mask the sensitive information to be displayed, etc. We have obtained ISO 27001, PCI DSS, and SOC2 Type 2 certifications. We rely on currently available technologies and take appropriate security measures to protect your personal data.
In the unlikely event of a data breach affecting your personal data, we will inform you in accordance with laws and regulations by email or other means.
We reserve the right to update this Privacy Notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
The data controller for your personal data is Trip.com Travel Singapore Pte. Ltd., a limited liability company with its address at 30 Raffles Place, #29-01 Singapore 048622. If you have questions about this Privacy Notice or wish to contact us for any reason in relation to our personal data processing, please contact our Data Protection Officer at sg_dataprotection@trip.com.
Our websites and apps (“platforms”) use cookies that are essential for their operations. We also use cookies for various other purposes including analytics, functionality, and marketing.
A cookie is a small text file that we store on your computer or phone when you use our platforms. To learn more about cookies, please go to www.aboutcookies.org.
We may also use similar technologies such as Software Development Kits (SDKs). In this statement we refer to all such technologies as “cookies”.
You have the option to accept or decline cookies. While most web browsers are set to accept cookies by default, you can typically adjust your browser settings to refuse them if you wish. However, doing so might limit your ability to fully utilize the website’s features.
We use the following types of cookies:
Essential cookies:
These are cookies that our platforms cannot operate without. They include, for example, cookies that enable you to log into our platforms, use a shopping cart, and pay for travel products. You can switch these cookies off in your browser settings, however you may then not be able to use our platforms.
Non-essential cookies:
These cookies allow us to collect information on how you interact with our platforms. This helps us measure and improve the way our platforms work, for example by seeing how effective our offers and advertisements are and ensuring that you can easily navigate our platforms.
These cookies remember you between visits to our platforms. This enables us to personalize your experience and remember your preferences, for example, your past searches and your language, region, and currency settings.
We, together with our trusted third-party partners, use these cookies to record your visit to our platforms and your other online activities. This allows us to gather information on you to determine which travel products, advertisements, and offers we display to you both on our platforms and across the Internet. This helps us to provide a more personal advertising experience. To learn more about your options for personalized advertising, please go to www.youronlinechoices.eu. To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
We use session and persistent cookies. Session cookies are deleted when you close your browser or our apps. Persistent cookies remain on your computer or phone and are activated the next time you visit our platforms. Cookies may be placed by us, or one of our trusted third-party partners.
For users residing in Thailand, the foregoing Privacy Notice shall be modified as follows:
In addition to provision 5 of the Privacy Notice, data subjects residing in Thailand have the following rights regarding your personal data:
(1) Right to access and receive a copy of their personal information;
(2) Right of rectification;
(3) Right to object;
(4) Right to restrict processing;
(5) Right to erasure (also known as right to be forgotten);
(6) Right to data portability;
(7) Right to withdraw the consent given; and
(8) Right to complain to the Personal Data Protection Committee.
For users residing in Thailand, if you have questions about this Privacy Notice or wish to contact us for any reason in relation to our personal data processing, please contact our Data Protection Officer at th_dataprotection@trip.com.
To access our Cookie Statement in Thailand, please click here.
For users residing in Malaysia, the foregoing Privacy Notice shall be modified as follows:
11. User experience survey and market research
The “Legal Basis” column shall be modified as follows:
Your consent where required by law.
In the event that we need to collect any additional personal data from you other than the personal data stated in this Privacy Notice, either via emails or calls for the purposes of collecting user experience and market research, we will seek your consent before collecting such personal data.
We also have a legitimate interest in understanding and improving our services based on your feedback.
In addition to provision 5 of the Privacy Notice, data subjects residing in Malaysia have the following rights regarding your personal data:
You have the right to request access to your personal data that we hold about you, as well as the right to request the correction of any inaccurate or incomplete personal data.
The data controller for your personal data is Trip.com Travel Singapore Pte. Ltd., a limited liability company with its address at 30 Raffles Place, #29-01 Singapore 048622. If you have questions about this Privacy Notice or wish to contact us for any reason in relation to our personal data processing, please contact our Data Protection Officer at sg_dataprotection@trip.com or 03 8408 1076.
In the event of any conflict or inconsistency between the English version of this Privacy Notice and any other translated versions, the English version will prevail.
For users residing in the Philippines, the foregoing Privacy Notice shall be modified as follows:
In addition to the information provided in the Privacy Notice,
In addition to the Privacy Notice, under the applicable Philippine’s Data Privacy Act, you have the following data subject rights:
For users that fall under the following categories:
a. Indonesian citizens residing in Indonesia;
b. foreigners residing in Indonesia; and
c. foreigners residing abroad, but used to be Indonesian citizens, residing everywhere,
the Privacy Notice shall be modified as follows:
The table in the Privacy Notice describes the personal data we collect, use and/or disclose, the purposes for which we collect, use and/or disclose the personal data, and the legal bases we rely on to process the personal data. By accessing and/or utilising our Services and where required by applicable privacy laws and regulations, you hereby validly and expressly consent to the processing of your personal data in the manner described in this Privacy Notice.
14. Student verification and benefit provision
The “Detailed purpose and scenario description” column shall be modified as follows:
If you wish to verify your student status and enjoy related discounts, we will process relevant personal data, and some of such data is required by the suppliers/providers of the discounts. The ISIC International Student ID or similar certificate will be used solely to verify your student status.
If you are a student under 21 who wishes to use our service or book products available on our platform and wishes to verify your student status and enjoy related discounts, please ensure that you have obtained the consent of your parent or guardian in accordance with applicable laws.
The “Legal Basis” column shall be modified as follows:
We have a legitimate interest in managing our business and providing you with our Services.
Your consent and parent’s or guardian’s consent where required by law.
In addition to the information provided in the Privacy Notice,
In the event that there is no adequate level of data protection and appropriate safeguards to protect your personal data in those countries, we will request your consent before transferring your personal data to those countries.
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you wish to exercise any of these rights, please contact us via email at the contact details set out below.
Where Trip.com processes your personal data as allowed by law or with your consent, Trip.com will store your personal data i) only for as long as is required to fulfil the purposes mentioned previously or other business or legal purposes, ii) until you object to our use of your personal data (where Trip.com has a legitimate interest in using your personal data), iii) until you withdraw your consent, and/or iv) until when Trip.com ( http://trip.com/ ) realizes that your personal data was obtained and/or processed by Trip.com ( http://trip.com/ ) for whatsoever reasons unlawfully, whichever is applicable.
We reserve the right to update this Privacy Notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data. In the event you object to any modifications to our Privacy Notice, you retain the right to withdraw your consent to and/or request the cessation of the processing of your personal data. However, in circumstances where personal data processing is required to comply with applicable laws and regulations, it shall remain unaffected by any such withdrawal or cessation request.
For the processing of personal data as regulated by the PDP Regulations (as defined below), which has legal effect (a) in the jurisdiction of the Republic of Indonesia (applicable to Indonesian citizen and foreigners residing in Indonesia); and/or (b) on a personal data subject who is an Indonesian citizen or former Indonesian citizens (specifically those whose personal data was collected during their tenure as Indonesian citizens) located outside the jurisdiction of the Republic of Indonesia, the following additional terms will apply:
Pursuant to Section 2 of the Privacy Notice, Trip.com, acting as personal data controller as regulated by the PDP Regulations (as defined below) and its users shall comply with all applicable local, state, federal, and foreign laws in using the Services, including, but not limited to:
o Law No. 11 of 2008 on Electronic Information and Transactions, as amended;
o Law No. 27 of 2022 on Personal Data Protection;
o Government Regulation No. 71 of 2019 on Operations of Electronic Systems and Transactions;
o Minister of Communications and Information Technology Regulation No. 4 of 2016 on Information Security Management System;
o Minister of Communications and Information Technology Regulation No. 20 of 2016 on Personal Data Protection in Electronic Systems; and
o Minister of Communications and Information Technology Regulation No. 5 of 2020 on Operations of Electronic Systems in The Private Sector;
all amendments thereto and other relevant laws and regulations, as applicable (collectively referred to as the “PDP Regulations”).
This Privacy Notice is made available in English and other languages. In the event of any inconsistency or difference in interpretation between the other language version and the English language version, you agree that the English version shall prevail, and the other language version shall be interpreted to conform with and be consistent with the relevant part of the English version. For avoidance of doubt, the existence of versions of this Privacy Notice is not to be construed by you as creating different rights and obligations or duplication or multiplication of your or our rights and obligations under this Privacy Notice.
If you are under 21, except for those above 19 and are legally married, you represent and warrant that you have the consent of your parent and/or legal guardian to enter into and be bound by this Privacy Notice, and use the Services mentioned in this Privacy Notice.